Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
File:                     186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa (raw, json)
Hash identifier:          5jjYDRD0a9fe8RvQOvrJ1kQoffzCyLRBNbcLW8AHbxA=
Subject key identifier:   4D:04:61:00:96:DF:BD:AA:1D:60:5A:64:EF:EF:46:7F:91:0E:64:D0
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584A3E45AB09FB673755E0B03820
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     20253
IP address blocks:        2606:bc40:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ab:09:fb:67:37:55:e0:b0:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=354fbab8-bd58-4252-af03-9233c3581e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:c9:98:55:6a:38:97:36:1d:47:78:74:00:
                    86:21:9b:b9:90:75:c2:75:3e:d9:cc:32:d1:c1:9e:
                    a7:a9:2d:6c:56:ac:78:82:e3:4f:62:49:a9:ad:a6:
                    d0:72:32:73:61:56:cb:37:10:82:bb:a6:4e:53:a2:
                    61:70:46:1f:44:4b:1b:2a:52:e7:12:6f:80:78:fa:
                    c8:ae:4e:a7:c9:21:51:cb:ff:cc:65:34:cb:0b:b6:
                    27:64:87:5a:cf:11:09:ff:74:df:cb:cd:92:4f:28:
                    ce:4e:3e:c8:58:c3:f6:59:64:8c:72:ea:67:42:c9:
                    31:7d:9d:55:fc:dd:7c:49:2b:3d:e9:8d:35:80:b4:
                    f9:0a:2b:6f:06:ad:45:1b:61:7c:e8:4e:e3:bc:b4:
                    6e:3b:52:fc:1d:96:d2:33:b9:2b:e8:10:a1:2d:73:
                    b0:e8:e2:0b:66:21:c1:ce:8d:fc:f2:ea:4d:85:a8:
                    a6:87:5d:7b:6e:10:d4:b3:5c:9f:c5:4f:32:fa:f5:
                    d7:50:42:3d:96:9c:ee:f2:79:ed:5a:53:4b:bb:f0:
                    37:16:61:0a:81:54:4f:c6:a9:51:10:ce:6b:0e:db:
                    87:65:f3:58:b0:10:1c:19:c5:f4:c9:03:73:6d:80:
                    95:10:89:2d:8f:ac:17:79:0d:6e:80:b4:e4:b3:e1:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:04:61:00:96:DF:BD:AA:1D:60:5A:64:EF:EF:46:7F:91:0E:64:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:c8:b6:96:11:ba:f6:65:1a:95:8f:9a:7a:e6:ef:ce:a1:
         28:9e:22:91:ac:00:c5:8b:64:ec:21:f0:87:06:fc:3d:a5:81:
         e5:bc:fa:5c:aa:ad:f6:82:46:f1:2b:61:37:ff:1d:c9:84:10:
         f0:fc:55:25:a6:be:69:f4:60:1b:44:63:7c:5e:26:1b:af:cb:
         d8:b6:71:c6:63:3b:3a:f8:18:6b:f0:ce:e9:ad:ef:39:45:90:
         8c:d1:3f:89:b9:2b:ca:09:0e:d0:b1:88:de:55:ac:a5:99:4c:
         18:84:33:73:07:1f:93:fe:2d:34:86:f5:12:91:ab:44:97:ef:
         04:0f:87:cd:44:1b:24:e0:f4:b9:a0:de:4e:3b:bd:17:53:16:
         0f:c7:1f:ad:e0:37:bc:6c:13:10:65:a7:2a:cc:ec:0e:ce:37:
         15:33:09:e9:42:b3:22:eb:e1:7a:7a:66:c7:21:68:c6:67:ae:
         83:bb:33:f8:7d:d5:8c:e0:35:82:8f:78:38:8a:55:33:87:3c:
         31:0d:b1:bc:28:ff:eb:a7:91:5d:06:63:ad:9b:1d:66:a4:07:
         fa:1a:28:19:4d:36:20:88:53:98:19:94:dd:d4:7b:d3:d8:12:
         1c:3b:60:78:80:7d:09:64:db:fe:39:cc:84:7f:50:d0:54:38:
         19:c6:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:11:34 2025 by rpki-client